$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: N/LHyU1UjNM3eSvfVRyASoANNh7VFHZfDHwsrxPdULI= Subject key identifier: 35:AE:16:65:01:6A:87:8C:A5:D7:3A:77:E4:21:B6:95:B0:8C:82:43 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 0197383DC8DF14719668980BFFC6A70B217A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 10DE Signing time: Wed 04 Jun 2025 00:01:02 +0000 Manifest this update: Wed 04 Jun 2025 00:01:02 +0000 Manifest next update: Thu 05 Jun 2025 00:01:02 +0000 Files and hashes: 1: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 2: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 3: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 4: 7umXVXVg1N6hwSqwkGrW9hbU9MY.roa (hash: Nx/ebQomWetNO1nfMgsjmCDshpmpbfiPCVmWHYlcCPw=) 5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=) 7: CZpuUzJEsKjUOKMTz3rPnaPFYr0.roa (hash: 829sU0orhueuSWygyiEyGmFZ/X99K3xCPmemYX73BGM=) 8: FL7xyPZcMQ2IcS_NYdOw64zSnhI.roa (hash: hTtsrLyKX+B71mb+xLolhfXCujGBZZVnGz4ugWVh69Q=) 9: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 10: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 11: e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa (hash: jUrwE90O+dclJeJNaa2stLGSCRfUe/eu1j5NSomJE/4=) 12: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 13: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 14: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=) 15: oOSVGz-lQ6vIUBzKyOG7f87voLE.roa (hash: 35ws12+7zflfNIPckOxiSxE1IEtJ0udwzAAqCDOK85k=) 16: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 17: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 18: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: cDVizpZCv2ow0KQYaT5ExATPbxYfeAaZCvR6DO0vfLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:38:3d:c8:df:14:71:96:68:98:0b:ff:c6:a7:0b:21:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jun 4 00:01:02 2025 GMT Not After : Jun 5 00:01:02 2025 GMT Subject: CN=35ae1665016a878ca5d73a77e421b695b08c8243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:89:71:30:46:2b:48:12:37:e8:b8:ce:08: 67:66:00:a4:8d:57:d1:6e:a3:a7:d1:e0:02:56:10: 67:a9:77:9e:8c:54:99:38:3f:21:3f:2a:3e:0d:02: 27:c2:c6:11:ff:67:d1:c3:d5:cb:4c:b9:46:d4:48: 4b:f3:5f:2e:4f:93:ff:25:48:c8:d4:fe:b7:cf:05: ca:95:84:08:c2:01:e1:6f:3b:fa:48:f0:89:5b:f8: 9e:7b:43:46:24:4e:87:cd:d6:22:83:47:a6:6b:61: 45:f6:90:1d:c6:0e:27:c4:f1:16:24:a7:1f:b8:07: 97:68:4b:00:d4:70:07:eb:32:f7:02:ca:81:21:fe: 9d:7c:91:6c:bd:23:30:ba:c7:5f:4e:e8:10:06:05: 34:db:da:47:06:6a:ad:1f:3b:ca:57:a6:6d:90:2a: 07:f0:f8:6e:ba:eb:53:1e:b9:a1:b5:d0:81:e3:27: 40:6e:2d:10:cc:42:46:3a:20:5b:5a:0d:50:52:cf: 0b:0f:81:12:f7:3e:1d:59:32:1f:bb:db:5b:08:a6: 0d:6d:a6:97:35:9e:23:52:d5:3c:82:8d:75:31:0f: 5a:8b:ae:1c:49:ed:a1:68:f6:e1:aa:e3:28:3a:cd: 7b:26:ce:d5:81:ad:9f:44:28:77:3a:63:7c:40:c7: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AE:16:65:01:6A:87:8C:A5:D7:3A:77:E4:21:B6:95:B0:8C:82:43 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:74:c1:f2:c0:ab:7a:1d:85:a4:a2:e7:f1:63:22:49:ea:e3: 7d:2c:7b:1d:b6:bd:03:ed:92:08:2c:6e:04:05:5d:4c:94:f2: 64:6a:60:96:b4:4e:7e:60:3c:ce:63:02:32:81:fc:46:b5:70: 87:f2:1b:09:99:2f:5e:b0:47:b4:4a:28:bc:f7:36:65:f6:12: ed:42:4b:8e:03:57:54:3b:91:0b:cf:6c:56:96:49:e8:31:2a: 8d:67:e9:14:f5:75:7a:ab:31:5b:08:c2:8d:f2:4f:31:76:5d: 9c:0f:b5:7f:f9:33:b8:f7:87:02:8b:6a:39:65:ad:15:07:84: 9e:5d:8f:fd:60:a4:48:15:9b:c9:f9:0f:84:fe:64:bf:8d:38: 22:6c:9c:4f:94:9e:3a:d0:ac:6b:fe:77:fc:28:54:ce:1c:01: 04:4a:d2:40:ab:15:44:c7:bb:d2:98:38:0c:cb:35:80:ae:0e: ce:e3:56:63:d3:1d:75:22:c8:5f:50:9c:49:97:f0:c8:7d:e1: 3f:ab:2b:46:8f:46:34:05:9f:11:5b:fd:eb:34:9a:5e:7c:d4: 8d:f5:69:4f:0f:49:6e:1a:6a:2f:a5:ea:92:12:56:ad:7a:48: 54:ea:e2:f1:a4:7c:8c:de:cb:ec:48:97:bb:c0:63:93:c7:6a: 6d:35:6e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc4PcjfFHGWaJgL/8anCyF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUwNjA0MDAwMTAyWhcNMjUwNjA1MDAwMTAyWjAzMTEwLwYDVQQD EygzNWFlMTY2NTAxNmE4NzhjYTVkNzNhNzdlNDIxYjY5NWIwOGM4MjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L2JcTBGK0gSN+i4zghnZgCkjVfR bqOn0eACVhBnqXeejFSZOD8hPyo+DQInwsYR/2fRw9XLTLlG1EhL818uT5P/JUjI 1P63zwXKlYQIwgHhbzv6SPCJW/iee0NGJE6HzdYig0ema2FF9pAdxg4nxPEWJKcf uAeXaEsA1HAH6zL3AsqBIf6dfJFsvSMwusdfTugQBgU029pHBmqtHzvKV6ZtkCoH 8PhuuutTHrmhtdCB4ydAbi0QzEJGOiBbWg1QUs8LD4ES9z4dWTIfu9tbCKYNbaaX NZ4jUtU8go11MQ9ai64cSe2haPbhquMoOs17Js7Vga2fRCh3OmN8QMclJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWuFmUBaoeMpdc6d+QhtpWwjIJDMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3TB8sCr eh2FpKLn8WMiSerjfSx7Hba9A+2SCCxuBAVdTJTyZGpglrROfmA8zmMCMoH8RrVw h/IbCZkvXrBHtEoovPc2ZfYS7UJLjgNXVDuRC89sVpZJ6DEqjWfpFPV1eqsxWwjC jfJPMXZdnA+1f/kzuPeHAotqOWWtFQeEnl2P/WCkSBWbyfkPhP5kv404ImycT5Se OtCsa/53/ChUzhwBBErSQKsVRMe70pg4DMs1gK4OzuNWY9MddSLIX1CcSZfwyH3h P6srRo9GNAWfEVv96zSaXnzUjfVpTw9JbhpqL6XqkhJWrXpIVOri8aR8jN7L7EiX u8Bjk8dqbTVufQ== -----END CERTIFICATE-----Generated at Wed Jun 4 10:15:02 2025 by rpki-client